Traffic Trace Info
DumpFile: 201203300915.dump
FileSize: 2071.80MB
Id: 201203300915
StartTime: Fri Mar 30 09:15:00 2012
EndTime: Fri Mar 30 09:30:00 2012
TotalTime: 900.31 seconds
TotalCapSize: 1636.26MB CapLen: 96 bytes
# of packets: 28543274 (20192.36MB)
AvgRate: 188.03Mbps stddev:42.80M
IP flow (unique src/dst pair) Information
# of flows: 2061989 (avg. 13.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.4% 3.3% 2.8% 2.2% 2.1% 2.1% 2.1% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1518264
Top 10 bandwidth usage (bytes/total in %):
13.2% 9.3% 7.4% 5.5% 5.0% 4.9% 4.6% 4.3% 4.0% 3.9%
# of IPv6 addresses: 5667
Top 10 bandwidth usage (bytes/total in %):
43.8% 29.8% 29.8% 6.6% 4.4% 4.3% 3.3% 3.3% 3.1% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300915.pktlen.png)
detailed numbers
[ 32- 63]: 5847312
[ 64- 127]: 7201121
[ 128- 255]: 920561
[ 256- 511]: 575187
[ 512- 1023]: 929532
[ 1024- 2047]: 13069561
Protocol Breakdown
![[protocol breakdown chart]](201203300915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28543274 (100.00%) 21173224135 (100.00%) 741.79
ip 28295545 ( 99.13%) 21028119171 ( 99.31%) 743.16
tcp 22553434 ( 79.01%) 18553306470 ( 87.63%) 822.64
http(s) 8911257 ( 31.22%) 11808863833 ( 55.77%) 1325.16
http(c) 6042329 ( 21.17%) 663178412 ( 3.13%) 109.76
squid 1390697 ( 4.87%) 1530795039 ( 7.23%) 1100.74
smtp 36103 ( 0.13%) 9886268 ( 0.05%) 273.84
ftp 8367 ( 0.03%) 826502 ( 0.00%) 98.78
pop3 2905 ( 0.01%) 627174 ( 0.00%) 215.89
imap 3207 ( 0.01%) 584393 ( 0.00%) 182.22
telnet 4966 ( 0.02%) 350942 ( 0.00%) 70.67
ssh 113407 ( 0.40%) 29763458 ( 0.14%) 262.45
dns 5961 ( 0.02%) 3574886 ( 0.02%) 599.71
bgp 602 ( 0.00%) 90136 ( 0.00%) 149.73
napster 97 ( 0.00%) 8806 ( 0.00%) 90.78
realaud 16 ( 0.00%) 982 ( 0.00%) 61.38
icecast 15090 ( 0.05%) 15304187 ( 0.07%) 1014.19
hotline 20 ( 0.00%) 1234 ( 0.00%) 61.70
other 6018409 ( 21.09%) 4489450158 ( 21.20%) 745.95
udp 2638158 ( 9.24%) 1234213664 ( 5.83%) 467.83
dns 427577 ( 1.50%) 116287136 ( 0.55%) 271.97
realaud 5 ( 0.00%) 806 ( 0.00%) 161.20
halflif 39 ( 0.00%) 12397 ( 0.00%) 317.87
starcra 61 ( 0.00%) 5880 ( 0.00%) 96.39
everque 620 ( 0.00%) 386187 ( 0.00%) 622.88
unreal 87 ( 0.00%) 27538 ( 0.00%) 316.53
quake 11 ( 0.00%) 1640 ( 0.00%) 149.09
other 2208411 ( 7.74%) 1117360914 ( 5.28%) 505.96
icmp 1657560 ( 5.81%) 159806801 ( 0.75%) 96.41
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7400 ( 0.03%) 2474976 ( 0.01%) 334.46
ip6 1418665 ( 4.97%) 1073642946 ( 5.07%) 756.80
pim 163 ( 0.00%) 9780 ( 0.00%) 60.00
other 19980 ( 0.07%) 4645264 ( 0.02%) 232.50
frag 3222 ( 0.01%) 2560415 ( 0.01%) 794.67
ip6 247729 ( 0.87%) 145104964 ( 0.69%) 585.74
tcp6 162826 ( 0.57%) 128124465 ( 0.61%) 786.88
http(s) 7982 ( 0.03%) 9395151 ( 0.04%) 1177.04
http(c) 31891 ( 0.11%) 2571381 ( 0.01%) 80.63
smtp 154 ( 0.00%) 63254 ( 0.00%) 410.74
ssh 180 ( 0.00%) 25976 ( 0.00%) 144.31
dns 135 ( 0.00%) 20562 ( 0.00%) 152.31
bgp 96 ( 0.00%) 15556 ( 0.00%) 162.04
other 122388 ( 0.43%) 116032585 ( 0.55%) 948.07
udp6 51018 ( 0.18%) 12128524 ( 0.06%) 237.73
dns 47112 ( 0.17%) 11397759 ( 0.05%) 241.93
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 3905 ( 0.01%) 730655 ( 0.00%) 187.11
icmp6 33224 ( 0.12%) 4298891 ( 0.02%) 129.39
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 546 ( 0.00%) 537456 ( 0.00%) 984.35
tcpdump file: 201203300915.dump.gz (664.65 MB)